Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
File: DbD591Ww4wPMFtGmM_lYwDYDSUU.mft (raw, json)
Hash identifier: 3jCxa/mrGxKNTDOsY1it4QGHVJvpmT2keUXc2z9xJ88=
Subject key identifier: 54:21:7A:75:E2:0D:1F:DD:BD:3C:9D:78:80:0D:51:75:A9:0E:3A:79
Authority key identifier: 0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
Certificate issuer: /CN=0db0f9f755b0e303cc16d1a633f958c036034945
Certificate serial: 0196553756D6B9FA99EFB644174308554D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
Manifest number: 09E2
Signing time: Sun 20 Apr 2025 22:00:11 +0000
Manifest this update: Sun 20 Apr 2025 22:00:11 +0000
Manifest next update: Mon 21 Apr 2025 22:00:11 +0000
Files and hashes: 1: DbD591Ww4wPMFtGmM_lYwDYDSUU.crl (hash: xxJfNjiTmUljbgd119IdU8hJMHS1pwTeDjx1nrwO6J4=)
2: s3TIKJMGO-H8fbbN5SX9DjrKZbg.roa (hash: nJZCH4ElBXirrkbsvqmvn6OniRKSBo6O3OjFqSqnuAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:56:d6:b9:fa:99:ef:b6:44:17:43:08:55:4d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db0f9f755b0e303cc16d1a633f958c036034945
Validity
Not Before: Apr 20 22:00:11 2025 GMT
Not After : Apr 21 22:00:11 2025 GMT
Subject: CN=54217a75e20d1fddbd3c9d78800d5175a90e3a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:75:e4:ab:c1:66:39:7a:98:2b:67:bc:97:
ad:d1:91:51:c6:7c:57:48:8d:d4:2f:3f:e8:92:bf:
d7:83:64:3e:bb:f9:a4:10:40:a2:d2:d4:f2:5a:c8:
43:0d:66:81:2c:99:a3:2f:55:1b:6f:48:a4:76:e4:
d6:9e:16:e0:7f:bb:ff:f8:58:ea:d6:26:19:39:64:
75:a1:e9:25:c5:d4:34:b0:a3:c3:37:79:ea:04:dd:
24:6c:55:57:48:d7:fa:da:4f:0d:d3:d5:4f:d3:ae:
2b:87:aa:b0:19:97:c3:e1:03:0e:29:ab:ce:65:b4:
c0:cc:d4:d5:b5:d0:f9:80:a9:16:e1:de:38:d6:5a:
e9:ba:f7:15:58:a5:56:a4:ca:a9:39:d5:fe:b9:20:
9c:fb:95:30:49:0c:ff:d0:78:9c:8f:c8:0d:bb:78:
8c:8b:fc:a1:0f:f4:49:b4:17:16:d3:b0:24:82:db:
e4:15:5c:40:20:fd:97:5a:80:28:34:30:4a:e5:77:
4a:20:a3:71:d5:f9:69:9e:05:07:ae:f0:d1:92:b4:
8d:74:cc:fc:26:ea:93:ea:a7:f3:ae:2d:07:76:ba:
04:a9:81:01:72:05:53:e4:8f:b5:a4:32:92:72:79:
bd:48:8e:5b:d0:51:13:1b:ca:33:69:91:af:04:3b:
de:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:21:7A:75:E2:0D:1F:DD:BD:3C:9D:78:80:0D:51:75:A9:0E:3A:79
X509v3 Authority Key Identifier:
keyid:0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b7:ab:53:60:85:9c:ce:c5:82:e9:f3:9a:66:45:1c:05:ee:
88:fe:0d:9b:41:f5:b8:9b:3f:a8:00:46:e6:09:49:08:43:78:
a9:31:5a:ef:f0:14:69:90:59:36:6b:b6:11:c7:b7:2a:7d:75:
26:69:03:fa:3e:bb:60:16:b0:d4:1f:a6:0c:55:4e:dd:05:69:
a0:71:48:5a:f6:f9:ba:d6:ed:56:fa:52:93:cf:d8:8a:8e:0c:
53:49:97:46:15:cb:55:f5:54:0e:e2:da:cd:0c:31:1b:35:d4:
03:e3:36:fc:a3:56:34:a6:8b:19:fd:fb:4a:1b:b1:08:55:f1:
c5:fe:e6:f9:5b:f9:ae:e5:68:20:1d:6e:dd:fb:e3:dd:78:06:
f6:c1:bc:35:af:da:c5:4d:57:e7:57:b0:71:5f:58:1b:e3:1b:
55:f1:f0:25:99:ae:dd:44:51:36:4e:76:9c:91:85:9a:3f:a7:
bd:b6:c4:c7:4b:12:75:94:46:14:b2:e2:8e:22:ba:0f:ef:19:
1d:c1:4a:42:84:4d:84:35:c4:15:54:d0:e2:7d:fa:cf:93:05:
d8:0b:1f:40:14:c4:50:a4:46:56:f0:9c:8d:94:db:55:a6:18:
e3:06:f7:a4:f4:5b:97:d2:e9:c2:a2:c7:b2:30:d0:e5:1f:9f:
f1:f3:7d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:44:31 2025 by rpki-client